This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
File: advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json)
Hash identifier: wXiJwVjHTVwff90R9kX8t84KdiTTQVNfWd8Kat/2vrY=
Subject key identifier: EB:2B:0C:FC:F5:E8:79:40:0A:43:C7:0C:92:42:77:84:E5:28:A4:19
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 019B0D4951D1768701F4518622A88683636E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
Manifest number: 0508
Signing time: Thu 11 Dec 2025 12:01:07 +0000
Manifest this update: Thu 11 Dec 2025 12:01:07 +0000
Manifest next update: Fri 12 Dec 2025 12:01:07 +0000
Files and hashes: 1: 356qaAYQpDV5m2Riq8A1jSL_myc.roa (hash: J+LALyAXIHBq3+bBLiTSfwMeZdohnuBRZTHDVc6I9II=)
2: 50QBDzaaWAWirDv35AlJpGDh488.roa (hash: U9zp626nKKun30mCMXd5d52t9o6/HWZq00zHsZoBgiw=)
3: 5vI96mdACUYtbrBj1hpxS2th8SU.roa (hash: +D5F/vhkd6kDEoeI5nvUAAqsYy/qD8SkAXkJnFT0scM=)
4: 6tthdMUigNGL-Lj03VV1437ckw0.roa (hash: 3DKuUAToC850yfEHGnyn8P4fVujt3XjQI9EcyxZgd7k=)
5: 7md33wTGzdjzkpdm2YWPb96DeAE.roa (hash: XTg5R+tAMtHvJrOV1S/6jDI/yrBqzGpGjvAacgtOwFs=)
6: FNzx-AXDWYQXweTOw5GW8wLwA8Y.roa (hash: pI2apPSLr8xZ4eK8bjFcepwZqTx3hkzwJixceRtYmFQ=)
7: H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa (hash: alhkfmIs5h48famyJbrNqD1LroO26bFxdaO2RO80rB0=)
8: Nx_LlHukO6YVT2BEBxBXRcLN_po.roa (hash: KT5voOJbr5oTRoQ5gvpwOS1NktXBmDgt7n2ImgfHYoM=)
9: RNey77PyYZ7q5aSaC4PKivPQUp4.roa (hash: nbnaDHAsWvelX6heHPYA3AE04SRORSzM43r0uMU5XGU=)
10: SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa (hash: Gny5FCnUJO7mwZfbJF+nB2yfn78HUv4IFWcliadewNg=)
11: Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa (hash: gAGb1Y5AmI4FXfL962Kn9U3vKesk+PWP9SX12mcYBwQ=)
12: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: bJLimom01VEVqUTcB4MsTMyLTDNJpu5Zgwn4ZDUh3WM=)
13: ixSljlpAv7VqFqZBManiWIU_IIY.roa (hash: S7kK0yaWZD9cO4dIzOpKGjzXHLiqqB9lAeIuZmQigdM=)
14: kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa (hash: cRZ9xm6BVrOYd9CySCPL4z+78bjkaTOH3OZ66vuPhhQ=)
15: lNQAITIC5PmIJYf58oFmM4_t7ZI.roa (hash: EoC37uqzi538UDD96xogxI48SXL4t+AtWBAP3kmAc9E=)
16: nzL5rU21d1PlGGMQdcFTW627B-Y.roa (hash: 9reJY4cgowCz0eQpIjwulCKKRQRpF5bMWpAhQfAMQg8=)
17: rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa (hash: l8U8iyph5EKJjwuIU1Ch+SfAGqICGB1ZppWFQqcO0KU=)
18: uPVNzfaFCEVH8pgEcujrS2hKdGY.roa (hash: 624lPGVpaWFoqr9oTQxsUT+zutBPV/3xF9eLcAlFX3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0d:49:51:d1:76:87:01:f4:51:86:22:a8:86:83:63:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Dec 11 12:01:07 2025 GMT
Not After : Dec 12 12:01:07 2025 GMT
Subject: CN=eb2b0cfcf5e879400a43c70c92427784e528a419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:cb:ab:3b:73:fb:8c:fd:08:58:7f:7b:1c:
de:5c:32:02:b9:d2:8e:28:56:7e:ab:ad:93:c6:55:
43:a8:ab:f4:86:1e:57:6c:9e:c7:7a:6e:88:bf:9f:
9c:cb:ae:8b:87:17:39:be:dd:3f:6f:8c:ad:21:2c:
ff:4b:c5:8f:0e:0a:a6:1e:a0:62:ae:e6:28:ed:ca:
87:c8:b9:50:96:20:ab:b7:77:4b:af:3f:d0:5e:e2:
ea:e6:ad:d9:05:7a:12:70:03:e7:9d:0c:33:65:ce:
d4:ba:ac:3d:4f:da:4b:6e:58:45:17:12:26:e1:75:
3d:75:bb:b3:61:d0:ef:b2:0f:1e:10:cd:ca:1c:7c:
f7:00:ea:34:df:63:70:ad:8a:54:86:ee:42:f0:e7:
73:6b:ca:c7:d9:e2:3c:5f:fd:09:76:b2:cb:60:78:
91:a5:57:68:8e:9e:45:fb:78:ca:ce:48:a2:d3:6c:
32:97:4e:19:d9:27:dc:2b:07:fd:e2:20:90:33:72:
0a:9d:e2:39:a2:05:47:f9:15:b7:0c:bc:a7:49:fc:
b0:bb:c0:d3:c3:19:09:8f:73:b5:3e:7d:91:f7:91:
76:ba:5e:83:2c:84:19:8f:5c:27:04:61:2b:49:d6:
80:73:97:42:e3:1c:8f:54:c6:b4:34:45:39:92:09:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2B:0C:FC:F5:E8:79:40:0A:43:C7:0C:92:42:77:84:E5:28:A4:19
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:30:29:d9:59:bc:ca:e2:e8:73:f8:c4:a4:4d:ad:56:87:9b:
fc:a7:4e:a0:fe:46:4c:c0:9d:a1:18:04:ff:70:15:43:8d:00:
1a:b5:7a:f1:f9:4b:f3:1f:53:5f:78:2d:15:04:2e:ca:c3:55:
35:ea:f6:54:aa:9d:4a:2c:73:b9:7e:c8:17:76:24:4a:c6:88:
a2:66:06:3e:68:6f:a9:5c:60:6e:71:6b:9a:0d:a4:64:b9:a6:
e3:49:cf:3f:0c:e9:70:ed:a7:43:3e:53:3b:16:39:c9:e4:d9:
2c:5e:f0:9b:4c:94:c6:4c:db:5d:4d:ea:96:82:09:2f:4f:78:
a6:4a:c1:3c:02:4a:d2:f7:bf:d8:92:07:b6:2f:99:e9:e9:a8:
84:9a:51:f4:ee:d1:7f:36:e3:18:ea:cd:a4:74:84:eb:05:0c:
3e:4d:5c:4c:84:35:61:6b:3d:d9:0b:64:55:56:db:55:14:14:
19:00:9e:8d:23:b2:6a:59:e8:54:63:38:76:85:b3:d3:29:b4:
e9:35:0e:7f:f8:b5:79:a6:55:b7:eb:05:cd:d0:a6:81:6c:21:
3c:df:65:ca:bb:bf:50:ad:fb:32:58:85:ab:d9:5e:4a:c1:3d:
39:23:db:f2:fa:e6:e0:a1:52:f0:fd:33:af:c0:16:a1:ef:9b:
83:d0:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 15:11:16 2025 by rpki-client